CVE-2021-35132

CVE-2021-35132 describes an out-of-bounds write in Qualcomm Snapdragon DSP service (closed-source components) caused by an improper bound check on the response buffer. Affected are multiple Snapdragon line items (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The i...

CVE-2021-35132

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35122

CVE-2021-35122 affects Qualcomm Snapdragon family devices (Auto/Compute/Connectivity/CIoT/Industrial IoT/Mobile/Wearables). The flaw stems from improper input validation, allowing a non-secure region to modify RG permissions of IO space xPUs, enabling local privilege escalation with high impact o...

CVE-2021-35113

CVE-2021-35113: Qualcomm Snapdragon family (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables) may suffer an authentication bypass due to improper ordering of signature verification and hashing in the signature verification path. Root cause stated as incorrect order of operations in ...

CVE-2021-35097

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...

CVE-2021-35097

CVE-2021-35097 concerns an authentication bypass caused by the improper order of signature verification and hashing in Qualcomm Snapdragon’s signature verification path. Affected components span Snapdragon Auto, Compute, Connectivity, COTS IoT, Industrial IoT, Mobile, Voice & Music, and Wearables...

PT-2022-17459 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia component of Snapdragon Auto due to a buffer overflow. This overflow occurs while processing the count variable...

PT-2022-15210 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-15240 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia component due to an improper check on received messages. Recommendations: At the moment, there is no information...

PT-2022-15212 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: An out-of-bounds read can occur while parsing a server certificate due to improper length check in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon...

PT-2022-15237 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Description: The issue is related to a denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto. Recommendations: At the...

PT-2022-15236 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to an improper check on received export descriptors. Recommendations: At the moment, there is no information abo...

PT-2022-15242 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia component of Snapdragon Auto, caused by an improper length check during data copying. Recommendations: At the...

PT-2022-15238 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia component of Snapdragon Auto, caused by incorrect type conversion when adding data. Recommendations: At the...

PT-2022-15223 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper validation of backend id in the PCM routing process, which can lead to memory corruption. This affects various Qualcomm Snapdragon products,...

PT-2022-15234 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia driver due to an untrusted pointer dereference. This occurs while reading data from a socket, which can lead to...

PT-2022-15235 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to improper validation of an array index in Snapdragon Auto. This can potentially lead to security issues, but...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22071

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...